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This is a request to correct certain errors in one of the claims in the above- 
referenced application. Due to oversight of Applicants as well as apparently of the 
Office, certain steps in claim 3 as published are issued with duplicate language. 
Accordingly, Claim 3 is sought to be corrected as follows: 



3. A method for automatically disbursing a first party's personal 
information to a second party authorized by the first party by transmitting said 
first party's personal information from a server computer operated by a service 
provider, said server computer coupled to a database, the method comprising the 
steps of: 

establishing an account for the first party with the server computer; 
assigning an identifier to the first party; 

entering the first party's personal information, said first party's personal 
information comprising at least one of a plurality of information objects; 

assigning, by the first party, at least one of a plurality of security levels to 
each information object at any granularity, thereby enabling access to individually 
selected portions of the first party's personal information by individual receiving 
parties; 
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storing in the database the first party identifier, the information object and 
the security level assigned to the information object; 

receiving a request, said request comprising at least the first party 
identifier; 

in response to the request, selecting a first portion of the first party's 
personal information objects that could be transmitted to a second party; 

retrieving from the database the selected first portion of personal 
information objects, securely transmitting the retrieved first portion of personal 
information objects to the second party; 

generating an authorization key; 

prov i d i ng the author i zat i on k e y to the socond party; aret 

encoding the authorization key with at least one of a plurality of criteria, 
g e n e rat i ng an authorizat i on koy ; and 

providing the authorization key to the second party; 

wherein the at least one of a plurality of criteria includes a criterion to 
indicate the number of times the authorization key can be used by the second 
party to obtain access. 

As seen from the alterations, no new matter is added or existing matter deleted. 
Please issue a Certificate of Correction as shown in the attached Form PTO SB/44. 
Please assign this case to Customer No. 24490 for all future correspondence. A payment 
of $100 under 37 C.F.R. § 1.20(a) is enclosed. 
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I certify that on the date shown below I mailed this paper to: Assistant Commissioner for Patents. 
P.O. Box 1 450, Alexandria, VA 223 1 3 — - — aB==== ~--y2^JP > 
Dated: October 10, 2007 
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PATENT NO. : 6,845,448 
APPLICATION NO.: 09/478,796 

issue date : January 18,2005 

inventor(S) : Naren Chaganti, Sitapathi Rao Chaganti & Damayanti Chaganti 

It is certified that an error appears or errors appear in the above-identified patent and that said Letters Patent 
is hereby corrected as shown below: 

Column 15, line 1, cancel the text beginning with 11 A method for" to and ending "obtain access." in 
Column 16, line 19, and insert the following claim: 

3. A method for automatically disbursing a first party's personal information to a second party 
authorized by the first party by transmitting said first party's personal information from a server computer 
operated by a service provider, said server computer coupled to a database, the method comprising the 
steps of: 

establishing an account for the first party with the server computer; assigning an identifier to the first 
party; 

entering the first party's personal information, said first party's personal information comprising at 
least one of a plurality of information objects; 

assigning, by the first party, at least one of a plurality of security levels to each information object at 
any granularity, thereby enabling access to individually selected portions of the first party's personal 
information by individual receiving parties; 

storing in the database the first party identifier, the information object and the security level assigned 
to the information object; 

receiving a request, said request comprising at least the first party identifier; 

in response to the request, selecting a first portion of the first party's personal information objects 
that could be transmitted to a second party; 

retrieving from the database the selected first portion of personal information objects; 

securely transmitting the retrieved first portion of personal information objects to the second party; 

generating an authorization key; 

encoding the authorization key with at least one of a plurality of criteria; and 
providing the authorization key to the second party; 

wherein the at least one of a plurality of criteria includes a criterion to indicate the number of times 
the authorization key can be used by the second party to obtain access. 
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